Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It's 100% free, no registration required.

I am now using Windbg. But, I am unable to view FS (specifically FS:[0]). How can I get a dump of FS via Windbg? I've tried googling to no avail. I am specifically interested in SEH, but all I can find is dumping TEB or PEB.

0xc0000008 is triggered by a call to CloseHandle() with an invalid handle value, while a debugger is present. It is not a fatal exception, and is a common anti-debugging trick. Why do you think that Windows 8 is responsible?
–
peter ferrieJul 17 '14 at 15:49

Debugging the same app under Windows 7 with the same debugger does not cause any problems. I figured it was something with the OS.
–
JasonJul 18 '14 at 7:55